IN THE CLAIMS 

This listing of the claim will replace all prior versions and listings of claim in 
the present application. 
Listing of Claims 

Claims 1-8 (canceled). 

9. (currently amended)A symmetric-key decryption method performed by 
a computer, comprising the steps of: 

dividing ciphertext , which is an input text, to generate a plurality of ciphertext 
blocks each having a predetermined length; 

g e n e rat i ng a r a ndom numb e r s e qu e nc e b a s e d on a s e cr e t k e y; 

generating a first random number block and a second random number block 
both corresponding to each one-of said plurality of ciphertext blocks based on a 
secret key that is an input value from sa i d random numb e r s e qu e nc e; 

performing decryption operations for producing plaintext blocks each 
corresponding to each of said plurality of ciphertext blocks; 

concatenating the series of said ciphertext blocks one after another 
seguentially to output a plaintext, which includes a message and redundancy data; 
and 

examining the redundancy data to detect whether the ciphertext obtained from 
the plaintext has been altered, 

wherein one of said decryption operations for producing the plaintext block i 
corresponding to the ciphertext block i (2 <i< a number of ciphertext blocks) 
comprises: 



a first operation step for performing an arithmetic computation on said 
ciphertext block i, 

a second operation step for performing an arithmetic computation on a result 
of said first operation step performed on said ciphertext block i and said first random 
number block corresponding to said ciphertext block i, and 

a third operation step for performing an arithmetic computation on a result of 
said second operation step performed on said ciphertext block i and said second 
random number block corresponding to said ciphertext block i, to produce said 
plaintext block i, and 

wherein said first operation step performs the arithmetic computation on said 
ciphertext block i and a result of said second operation step performed on the 
ciphertext block i-1, and 

wherein either said first random number of said second random number is 
generated in complete isolation from any one of said plurality of ciphertext blocks or 
the result of said first operation step. 

outputt i ng a f ee dback va l u e obtain e d as a r e su l t of op e r a t i on on sa i d on e of 
th e p l ural i ty of c i phertext b l ocks and sa i d random numb e r block, said f ee dback v a lu e 
b ein g f e d back for us e in th e op e rat i on on anoth e r on e of th e p l ura li ty of c i ph e rt e xt 
b l ocks; and 

p e rf o rming a d e crypt i on op e rat i on us i ng sa i d on e of th e p l ura li ty of c i ph e rt e xt 
b l ocks, sa i d random numb e r b l ock, and sa i d f ee dback va l u e obt ai n e d as a r e su l t of 
op e rat i on on st ill a noth e r on e of th e p l ur ali ty of c i ph e rt e xt b l ocks to produc e a 
p l aint e xt b l ock. 
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10. (currently amended)The symmetric-key decryption method as claimed 
in claim 9, wherein the step of generating random number blocks divides a random 
number seguence longer than said ciphertext to produce the random number blocks 
independent of any one of said ciphertext blocks s ai d de c r y ption opo r a t i on us e s on e 
or mor e sa i d random numb e r b l ocks whos e tota l le ngth is long e r than a le ngth of 
sa i d on e of th e p l ur ali ty of ciph e rt e xt b l ocks . 

11. (original) The symmetric-key decryption method as claimed in 
claim 10, further comprising steps of: 

concatenating a plurality of said plaintext blocks to generate plaintext; 
extracting redundancy data included in said plaintext; and 
checking said redundancy data to detect whether said ciphertext has been 
altered. 

12. (currently amended)The symmetric-key decryption method as claimed 
in claim 1 1 , further comprising steps of: 

extracting secret data included in said plaintext , said secret data, different 
from either said redundancy data or said message, being data generated based on 
said secret key ; and 

checking said redundancy data and said secret data to detect whether said 
ciphertext has been altered. 
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Claims 13-20 (canceled). 



21 . (currently amended)A symmetric-key decryption apparatus comprising: 

a circuit for r e c ei v i ng dividing ciphertext, which is an input text, a nd d i v i d in g 
th e r e c ei v e d ciph e rt e xt to generate a plurality of ciphertext blocks each having a 
predetermined length; 

a random number generation circuit for r e c ei v i ng a s e cr e t koy to g e n e rate a 
r a ndom numb e r s e qu e nc e whoso le ngth i s l ong e r than a le ngth of sa i d c i ph e rt e xt, 
af*d-generating a first random number block and a second random number block 
both corresponding to each one-of said plurality of ciphertext blocks based on a 
secret key that is an input value from said r a ndom numb e r s e gu e nc e; 

a decryption operation circuit for performing decryption operations to produce 
plaintext blocks each corresponding to each of said plurality of ciphertext blocks; 

a circuit for concatenating the series of said plaintext blocks one after another 
seguentially to output a plaintext, which includes a message and redundancy data; 
and 

a circuit for examining the redundancy data to detect whether the ciphertext 
obtained from plaintext has been altered, 

wherein said decryption operation circuit for producing the plaintext block i 
corresponding to the ciphertext block i (2 <i< a number of ciphertext blocks) 
comprises: 

a first circuit for performing a first operation on said ciphertext block i, 

a second circuit for performing a second operation on a result of said first 
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operation performed on said ciphertext block i and said first random block 
corresponding to said ciphertext block i, and 

a third circuit for performing a third operation on a result of said second 
operation performed on said ciphertext block i and said second random number 
block corresponding to said ciphertext block i, to produce a result of said third 
operation as said plaintext block i, and 

wherein said first circuit performs the first operation on said ciphertext block i 
and a result of said second operation performed on said ciphertext block and 

wherein either said first random number or said second random number, 
which is generated by said random number generation circuit, is generated in 
complete isolation from any one of said plurality of ciphertext blocks or the result of 
said first operation. 

a c i rcu i t for outputt i ng a f ee dback va l ue obta i ned as a resu l t of operat i on on 
sa i d on e of th e p l ura li ty of c i ph e rt e xt b l ocks a nd s ai d random num ber b l ock, s ai d 
f ee dback va l u e b ei ng f e d b a ck for us e in th e op e rat ion on anot h e r on e of th e plura li ty 
of c i ph e rt e xt b l ocks; and 

a decrypt i on op e rat i on c i rcu i t for p e rform i ng a d e crypt i on op e r a t i on us i ng sa i d 
on e of th e p l ura li ty of c i ph e rt e xt blocks, sa i d random numb e r block, and sa i d 
f ee db a ck va l u e obt ai n e d as a r e su l t of op e r a t i on on st ill anoth e r on e of th e p l ura li ty 
of c i ph e rt e xt blocks to produc e a p lai nt e xt b l ock. 

22. (currently amended)The symmetric-key decryption apparatus as 
claimed in claim 21, wherein said random number generation circuit divides a 



6 



random number sequence longer than said series of ciphertext blocks to produce the 
random number blocks independent of any one of said ciphertext blocks d e crypt i on 
op e rat i on c i rcu i t us e s on e or mor e s ai d random numb e r b l ocks whos e tot al le ngth i s 
l ong e r than a le ngth of sa i d on e of th e p l ur ali ty of c i ph e rt e xt b l ocks , 

23. (original) The symmetric-key decryption apparatus as claimed in 
claim 22, further comprising: 

a circuit for concatenating a plurality of said plaintext blocks to generate 

i 

plaintext; 

a circuit for extracting redundancy data included in said plaintext; and 
a circuit for checking said redundancy data to detect whether said ciphertext 
has been altered. 

24. (currently amended)The symmetric-key decryption apparatus as 
claimed in claim 23, further comprising: 

a circuit for extracting secret data included in said plaintext, said secret data, 
different from either said redundancy data or said message, being data generated 
based on said secret key, 

wherein said circuit for detecting whether said ciphertext has been altered 
checks said secret data and said redundancy data to d e t e ct wh e th e r s ai d ciph e rt e xt 
has b ee n al t e r e d . 

Claims 25-32 (canceled). 
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33. (currently amended)A medium storing a program for causing a 
computer to perform a symmetric-key decryption method, wherein said program is 
read into said computer, said program when executed causes said computer to 
perform symm e tr i c - k e y decr ypt i on m e thod compr i s i ng the steps of: 

r e c ei v i ng dividing ciphertext which is an input text, a nd d i v i d i ng th e r e c ei v e d 
c i ph e rt e xt to generate a plurality of ciphertext blocks each having a predetermined 
length; 

r e c ei v i ng a s e cr e t k e y to g e n e r a t e a r a ndom numb e r s e qu e nc e whos e le ngth 
i s long e r than a le ngth of sa i d c i ph e rt e xt and generating a first random number block 
and a second random number block both corresponding to each one-of said plurality 
of ciphertext blocks based on a secret key that is an input value from sa i d random 
numb e r s e qu e nc e; 

performing decryption operations for producing plaintext blocks each 
corresponding to each of said plurality of ciphertext blocks; 

concatenating the series of said plaintext blocks one after another 
seguentially to output a plaintext which includes a message and redundancy data; 
and 

examining the redundancy data to detect whether the ciphertext obtained from 
the plaintext has been altered, 

wherein one of said decryption operations for producing the plaintext block i 
corresponding to the ciphertext block i (2 <i< a number of ciphertext blocks) 
comprises: 
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a first operation step for performing an arithmetic computation on said 
ciphertext block i, 

a second operation step for performing an arithmetic computation on a result 
of said first operation step performed on said ciphertext block i and said first random 
number block corresponding to said ciphertext block i; and 

a third operation step for performing an arithmetic computation on a result of 
said second operation step performed on said ciphertext block i and said second 
random number block corresponding to said ciphertext block i, to produce said 
plaintext block L and 

wherein said first operation step performs the arithmetic computation on said 
ciphertext block i and a result of said second operation step performed on the 
ciphertext block i-1, and 

wherein either said first random number of said second random number is 
generated in complete isolation from any one of said plurality of ciphertext blocks or 
the result of said first operation step. 

outputt i ng a f ee dback valu e obta i n e d as a r e su l t of op e r a t i on on sa i d on e of 
sa i d p l ur ali ty of ciphertext b l ocks and sa i d random numb e r b l ock, sa i d f ee db a ck 
va l u e b e ing f e d back for us e i n th e op e rat i on on anoth e r on e of sa i d p l ura li ty of 
c i ph e rt e xt b l ocks; and 

p e rform i ng a d e crypt i on op e ration us i ng said on e of th e p l ur ali ty of c i ph e rt e xt 
blocks, s ai d r a ndom numb e r b l ock, and sa i d f ee dback va l u e obta i n e d as a r e su l t of 
op e ration on st ill anoth e r on e of sa i d plura li ty of c i ph e rt e xt b l ocks to produc e a 
p l a i nt e xt b l ock. 
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34. (currently amended)The medium storing a program as claimed in claim 
33, wherein the step of generating random number blocks divides a random number 
sequence longer than said ciphertext to produce the random number blocks 
independent of any one of said ciphertext block s ai d d e crypt i on op e r a t i on us e s on e or 
mor e said r a ndom numb e r b l ocks whos e tota l l e ngth i s l ong e r than a l e ngth of s a id 
on e of th e p l ura li ty of c i phert e xt blocks . 

35. (original) The medium storing a program as claimed in claim 34, 
wherein said symmetric-key decryption method further comprises steps of: 

concatenating a plurality of said plaintext blocks to generate plaintext; 
extracting redundancy data included in said plaintext; and 
checking said redundancy data to detect whether said ciphertext has been 
altered. 

36. (currently amended)The medium storing a program as claimed in claim 
35, wherein said symmetric-key decryption method further comprises steps of: 

extracting secret data included in said plaintext , said secret data, different 
from either said redundancy data or said message, being data generated based on 
said secret key ; and 

checking said redundancy data and said secret data to detect whether said 
ciphertext has been altered. 
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Claim 37 (canceled). 

38. (new) The symmetric-key decryption apparatus as claimed in claim 22, 
wherein said random number generation circuit further comprises: 

a pseudorandom number generator for generating said random number 
sequence based on said secret key; and 

a circuit for producing said random number blocks from said random number 
sequence. 
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